Hacker News new | past | comments | ask | show | jobs | submit
thisisauserid | on: Firecracker VM Escape: PwnEscape Part 2
Firecracker VMs run on AWS. Odd that the article doesn't mention that.
whizzter | parent | next
Firecracker is open source and possibly others use it, AWS sells services with it though.
tptacek | root | parent | next
(A more complete way to say this is that Firecracker is the engine built to run AWS Lambda and AWS Fargate).
| root | parent
{"deleted":true,"id":50401404,"parent":50398090,"time":1794022738,"type":"comment"}
tcdent | root | parent | next
It has notable adoption in the agent sandbox space where this type of vulnerability is especially volatile.
thisisauserid | root | parent | next
> The target was Firecracker v1.16.1 on x86-64, with host kernel 7.0.0-1011-aws.
sscaryterry | root | parent
Firecracker v1.17.0 was released 10 September, so the version is ancient.
loading story #50399052
pier25 | root | parent | next
Fly uses it too afaik
tptacek | root | parent
Basically everyone in cloud-land uses it at this point.
loading story #50402332
sscaryterry | parent
The article is light on details, it is LLM slop.